CVE-2025-21674

Summary

CVE-2025-21674 is a vulnerability affecting the Linux kernel that involves a dependency issue during the enabling of IPsec packet offload in tunnel mode. This can result in a kernel panic due to an attempt to acquire a lock that is already held by a different task, creating an unsafe lock dependency between SOFTIRQ-irq-safe and SOFTIRQ-irq-unsafe locks. The vulnerability is located in the mlx5e driver, specifically in the mlx5e\_xfrm\_add\_state and xfrm\_state\_delete functions. The issue arises from the use of _bh() variant when marking SA mode in the SA add section and the unnecessary flush\_workqueue in the SA delete routine. This can potentially lead to a deadlock scenario and unintended behavior.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.